ca-bundle.trust.crt corrupted

edit

dnf info ca-certificates

...
URL         : https://fedoraproject.org/wiki/CA-Certificates
...
Description : This package contains the set of CA certificates chosen by the
       : Mozilla Foundation for use with the Internet PKI.

sudo dnf check-update ca-certificates; [[ $?==0 ]] && sudo dnf -y update ca-certificates || sudo dnf -y reinstall ca-certificates

Default ca-trust directories:

find /usr/share/pki/ca-trust-source{,/anchors} -maxdepth 1 -not -type d -exec ls -1 {} +
/usr/share/pki/ca-trust-source/ca-bundle.neutral-trust.crt
/usr/share/pki/ca-trust-source/ca-bundle.supplement.p11-kit
/usr/share/pki/ca-trust-source/ca-bundle.trust.crt
/usr/share/pki/ca-trust-source/README

find /etc/pki/ca-trust/source{,/anchors} -maxdepth 1 -not -type d -exec ls -1 {} +
/etc/pki/ca-trust/source/ca-bundle.legacy.crt
/etc/pki/ca-trust/source/README

info update-ca-trust

NAME
       update-ca-trust - manage consolidated and dynamic configuration of CA certificates and associated trust

sudo update-ca-trust extract